Step-up Auth without Super Admin API Token

I’d like to add step-up authentication to a custom Java application. The problem is, when the following it fails unless I use an API token with the super admin role.

VerifyFactorRequest request = client.instantiate(VerifyFactorRequest.class);
VerifyFactorResponse response = factor.verify(request);

Is there a way to verify a factor with a read-only admin role? Can I use the auth widget for step-up auth?